Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

Sandfly modules for emerging threats and beta testing.

Small scripts to help with Linux forensics and incident response.

Scripts to check for security issues with SSH keys and authorized_keys files on Linux and other Unix-like operating systems.

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.

Sandfly Security external credential provider adapter

Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.